This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6cLB2vy9EPHYYyEkvXvjvWfox-Q.roa File: 6cLB2vy9EPHYYyEkvXvjvWfox-Q.roa (raw, json) Hash identifier: XPWk56WWlVBfi1Zfe/fxc5i7ICwhvTjAxHxfJJqfVT4= Subject key identifier: E9:C2:C1:DA:FC:BD:10:F1:D8:63:21:24:BD:7B:E3:BD:67:E8:C7:E4 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12EC7AE760C1440C6F9DE9CC891C1A Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6cLB2vy9EPHYYyEkvXvjvWfox-Q.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 194.209.56.0/24 maxlen: 24 195.65.217.0/24 maxlen: 24 212.243.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ec:7a:e7:60:c1:44:0c:6f:9d:e9:cc:89:1c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9c2c1dafcbd10f1d8632124bd7be3bd67e8c7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:d4:8e:47:1d:1d:0f:92:d7:3d:6c:ff:f4: 62:8d:c8:20:23:76:f6:76:3c:5c:53:ba:59:de:75: 44:ed:d8:f9:da:ac:0e:ac:e4:fb:b2:86:f1:75:f9: 1d:31:d4:47:93:10:15:6c:59:ed:c3:5a:71:86:1a: d0:ec:e1:4a:48:76:a1:70:68:20:04:7f:66:13:5d: 0a:ac:52:4c:f3:56:78:5f:0b:29:b9:8e:81:65:c2: 7e:56:a1:79:50:c5:ef:b3:7b:03:d7:bc:d0:9a:61: 8d:8a:0e:d6:ff:d3:74:48:f8:b3:92:c0:47:9d:cc: ee:5a:ef:fb:ef:53:9d:7c:ae:b3:8c:00:ff:0e:d8: 97:d9:89:19:5f:e3:0e:f0:aa:6e:de:fc:cc:51:88: 49:0f:c1:ff:e1:16:55:cf:ca:2a:50:0b:07:30:de: 01:46:f3:a9:92:58:2c:28:80:ae:28:45:70:77:21: 50:94:33:1f:16:41:b8:82:57:c5:fe:a5:22:fe:80: b7:bd:b7:62:3d:b6:80:d4:17:5c:bc:e5:45:b2:3d: 3d:d2:bb:14:0a:81:85:ab:44:5c:23:63:07:c7:79: 37:19:dc:ac:d6:9e:66:d5:7d:5b:42:07:ea:27:2d: 62:c0:52:b3:ac:ac:b3:f5:81:7c:6a:06:e8:13:d6: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C2:C1:DA:FC:BD:10:F1:D8:63:21:24:BD:7B:E3:BD:67:E8:C7:E4 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6cLB2vy9EPHYYyEkvXvjvWfox-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.56.0/24 195.65.217.0/24 212.243.163.0/24 Signature Algorithm: sha256WithRSAEncryption 08:90:30:f5:86:34:3e:5b:2c:5e:a5:49:3a:d4:23:d9:f8:67: 9a:69:5e:2e:3e:6e:a9:a7:3e:9a:d5:32:9e:56:48:97:39:48: 5b:70:45:25:e6:a5:5d:be:2d:51:af:b0:ab:d0:06:39:f5:74: dd:60:5c:a2:32:71:1f:d2:e0:d8:ca:f2:c1:54:22:1d:db:a7: 25:bb:d1:f6:6e:b3:8b:39:d1:2d:bf:d8:c3:75:c7:73:26:ba: 9a:55:81:89:91:5a:8a:7b:97:da:4f:ce:9e:5a:4d:05:be:34: e3:60:7a:ee:0a:22:62:42:d2:8c:6a:54:48:56:19:94:aa:e0: c6:3e:c3:53:f1:fe:40:80:1f:fc:ed:0a:da:12:ea:53:f4:62: c1:93:56:0d:e4:87:5b:63:54:e6:0d:93:f2:8a:84:39:c2:a9: 17:70:ce:24:cd:4b:1b:4f:e2:87:22:64:d7:ae:ba:98:03:65: 85:ab:14:a2:74:51:fe:47:26:d1:0d:15:fb:ff:6a:a3:b4:06: a5:9b:f3:0c:2b:96:db:de:fd:97:66:7a:55:0a:34:34:fa:44: 71:d9:29:40:38:0e:5c:4d:72:ec:3e:ec:77:33:d6:fd:e4:4d: 50:50:0c:77:1d:24:1d:73:bc:59:43:b2:10:63:37:83:54:4b: be:f9:a6:72 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8Eux652DBRAxvnenMiRwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWMyYzFkYWZjYmQxMGYxZDg2MzIxMjRiZDdiZTNiZDY3ZThjN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqDUjkcdHQ+S1z1s//RijcggI3b2 djxcU7pZ3nVE7dj52qwOrOT7sobxdfkdMdRHkxAVbFntw1pxhhrQ7OFKSHahcGgg BH9mE10KrFJM81Z4XwspuY6BZcJ+VqF5UMXvs3sD17zQmmGNig7W/9N0SPizksBH nczuWu/771OdfK6zjAD/DtiX2YkZX+MO8Kpu3vzMUYhJD8H/4RZVz8oqUAsHMN4B RvOpklgsKICuKEVwdyFQlDMfFkG4glfF/qUi/oC3vbdiPbaA1BdcvOVFsj090rsU CoGFq0RcI2MHx3k3Gdys1p5m1X1bQgfqJy1iwFKzrKyz9YF8agboE9bmeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOnCwdr8vRDx2GMhJL17471n6MfkMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvNmNMQjJ2eTlFUEhZWXlFa3ZYdmp2V2ZveC1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwtE4AwQA w0HZAwQA1POjMA0GCSqGSIb3DQEBCwUAA4IBAQAIkDD1hjQ+WyxepUk61CPZ+Gea aV4uPm6ppz6a1TKeVkiXOUhbcEUl5qVdvi1Rr7Cr0AY59XTdYFyiMnEf0uDYyvLB VCId26clu9H2brOLOdEtv9jDdcdzJrqaVYGJkVqKe5faT86eWk0FvjTjYHruCiJi QtKMalRIVhmUquDGPsNT8f5AgB/87QraEupT9GLBk1YN5IdbY1TmDZPyioQ5wqkX cM4kzUsbT+KHImTXrrqYA2WFqxSidFH+RybRDRX7/2qjtAalm/MMK5bb3v2XZnpV CjQ0+kRx2SlAOA5cTXLsPux3M9b95E1QUAx3HSQdc7xZQ7IQYzeDVEu++aZy -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:42 2026 by rpki-client